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Abstract 

, We introduce two modal natural deduction systems that are suitable to represent and reason about transformations of 
quantum registers in an abstract, qualitative, way. Quantum registers represent quantum systems, and can be viewed as the 
structure of quantum data for quantum operations. Our systems provide a modal framework for reasoning about operations 



on quantum registers (unitary transformations and measurements) in terms of possible worlds (as abstractions of quantum 
registers) and accessibility relations between these worlds. We give a Kripke-style semantics that formally describes quantum 
register transformations, and prove the soundness and completeness of our systems with respect to this semantics. 



(N ■ 

>■ 1. Introduction 

: 

' Quantum computing defines an alternative computational paradigm, based on a quantum model |4| rather than a classical 
one. The basic units of the quantum model are the quantum bits, or qubits for short (mathematically, normalized vectors 
I of the Hilbert Space C^). Qubits represent informational units and can assume both classical values and 1, and all their 
r superpositional values. 

QQ A quantum register is a generalization of the qubit: a generic quantum register is the representation of a quantum state 

i of n qubits (mathematically, it is a normalized vector of the Hilbert space ). In this paper, we are not interested in the 
' structure of quantum registers, but rather in the way quantum registers are transformed. Hence, we will abstract away from 

• the internals of quantum registers and represent them in a generic way in order to describe how operations transform a register 
into another one. 

^ It is possible to modify a quantum register in two ways: by applying a unitary transformation or by measuring. Unitary 

■ " " transformations (corresponding to the so-called unitary operators of the Hilbert space) model the internal evolution of a 
quantum system, whereas measurements correspond to the results of the interaction between a quantum system and an 
observer. The outcome of an observation can be either the reduction to a quantum state or the reduction to a classical (non 
quantum) state. In particular, in this paper, we say that a quantum register w is classical iff w is idempotent with respect 
to measurement, i.e. each measurement of w has w as outcome. We call a measurement total when the outcome of the 
measurement is a classical register 

We propose to model measurement and unitary transformations by means of suitable modal operators. More specifically, 
the main contribution of this paper is the formalization of a modal natural deduction system lfT2l[T4l in order to represent (in an 
abstract, qualitative, way) the fundamental operations on quantum registers: unitary transformations and total measurements. 
We call this system MSQR. We also formalize a variant of this system, called MSpQR, to represent the case of generic (not 
necessarily total) measurements. 

It is important to observe that our logical systems are not a quantum logic. Since 1936 |5|, various logics have been 
investigated as a means to formalize reasoning about propositions taking into account the principles of quantum theory, 
e.g. Ill El. In general, it is possible to view quantum logic as a logical axiomatization of quantum theory, which provides an 
adequate foundation for a theory of reversible quantum processes, e.g. Ifni2l[3i ri0l . 



Our work moves from quite a different point of view: we do not aim to propose a general logical formalization of quantum 
theory, rather we describe how it is possible to use modal logic to reason in a simple way about quantum register transfor- 
mations. Informally, in our proposal, a modal world represents (an abstraction of) a quantum register. The discrete temporal 
evolution of a quantum register is controlled and determined by a sequence of unitary transformations and measurements 
that can change the description of a quantum state into other descriptions. So, the evolution of a quantum register can be 
viewed as a graph, where the nodes are the (abstract) quantum registers and the arrows represent quantum transformations. 
The arrows give us the so-called accessibility relations of Kripke models and two nodes linked by an arrow represent two 
related quantum states: the target node is obtained from the source node by means of the operation specified in the decoration 
of the arrow. 

Modal logic, as a logic of possible worlds, is thus a natural way to represent this description of a quantum system: the 
worlds model the quantum registers and the relations of accessibility between worlds model the dinamical behavior of the 
system, as a consequence of the application of measurements and unitary transformations. To emphasize this semantic view 
of modal logic, we give our deduction system in the style of labelled deduction 0[T3][I2], a framework for giving uniform 
presentations of different non-classical logics. The intuition behind labelled deduction is that the labelling (sometimes also 
called prefixing, annotating or subscripting) allows one to explicitly encode in the syntax additional information, of a semantic 
or proof-theoretical nature, that is otherwise implicit in the logic one wants to capture. Most notably, in the case of modal 
logic, this additional information comes from the underlying Kripke semantics: the labelled formula x:A intuitively means 
that A holds at the world denoted by the label x within the underlying Kripke structure (i.e. model), and labels also allow one 
to specify at the syntactic level how the different worlds are related in the Kripke structures (e.g. the formula xRy specifies 
that the world denoted by y is accessible from that denoted by x). 

We proceed as follows. In Section|2l we define the labelled modal natural deduction system MSQR, which contains two 
modal operators suitable to represent and reason about unitary transformations and total measurements of quantum registers. 
In Section[3] we give a possible worlds semantics that formally describes these quantum register transformations, and prove 
the soundness and completeness of MSQR with respect to this semantics. In SectionH] we formalize MSpQR, a variant of 
MSQR that provides a modal system representing all the possible (thus not necessarily total) measurements. We conclude in 
Section|5]with a brief summary and a discussion of future work. Full proofs of the technical results are given in the appendix. 

2 The deduction system MSQR 

Our labelled modal natural deduction system MSQR, which formally represents unitary transformations and total mea- 
surements of quantum registers, comprises of rules that derive formulas of two kinds: modal formulas and relational formulas. 
We thus define a modal language and a relational language. 

The alphabet of the relational language consists of: 

• the binary symbols U and M, 

• a denumerable set xq , xi , . . . of labels. 

Metavariables x, y, z, possibly annotated with subscripts and superscripts, range over the set of labels. For brevity, we will 
sometimes speak of a "world" x meaning that the label x stands for a world J^{x), where is an interpretation function 
mapping labels into worlds as formalized in Definition|2]below. 

The set of relational formulas (r-formulas) is given by expressions of the form xUy and xMy. 

The alphabet of the modal language consists of: 

• a denumerable set r, ro , ri , . . . of propositional symbols, 

• the standard propositional connectives _L and D, 

• the unary modal operators □ and ■. 

The set of modal formulas (m-formulas) is the least set that contains _L and the propositional symbols, and is closed under 
the propositional connectives and the modal operators. Metavariables A, B, C, possibly indexed, range over modal formulas. 
Other connectives can be defined in the usual manner, e.g. ^A = A ^-, A/\B = ^{A D ^B), A ^ B = {A D B) A{B D 
A), (}A = -nU^A, ♦A = -.■-.A, etc. 

Let us give, in a rather informal way, the intuitive meaning of the modal operators of our language: 
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[x:A] 

x-.B 
x:A D B 



x:A D B x:B 
x:B 



D E 



[x:^A] 
x:A 



vRy] 



RAA 



x:± 
a 



±E 



y 



A 



x:irA 

[xMy] 



x:-irA xRy 



xijy 
yUx 



(Jsymm 



xUy yUz 

xUz 



U trans 



xMy 
xUy 



U/ 



^ Mser* 



xMy 

yMy 



Msrefl 



a{x) xMx xMy cy.{y) xMx xMy 

T-^-^ Msuhl T-r--. Msuh2 

a{y/x) a{x/y) 

In if I, y is fresh: it is different from x and does not occur in any assumption on which y.A depends other than xRy. 

In Mser, y is fresh: it is different from x and does not occur in a nor in any assumption on which a depends other than xMy. 

Figure 1. The rules of MSQR 



• DA means: A is true after the application of any unitary transformation. 

• UA means: A is true in each quantum register obtained by a total measurement. 

A labelled formula (l-formula) is an expression x:A, where a; is a label and A is an m-formula. A formula is either an 
r-formula or an l-formula. The metavariable a, possibly indexed, ranges over formulas. We write a{x) to denote that the 
label x occurs in the formula a, so that a{y/x) denotes the substitution of the label y for all occurences of x in a. 

Figure[T]shows the rules of MSQR, where the notion of discharged/open assumption is standard |[l2l[T4l . e.g. the formula 
[x:A] is discharged in the rule D /: 

Prepositional rules: The rules D I,D E and RAA are just the labelled version of the standard (fT2lT4l) natural deduction 
rules for implication introduction and elimination and for reductio ad absurdum, where we do not enforce Prawitz's 
side condition that A ^ _lQ The "mixed" rule ±i? allows us to derive a generic formula a whenever we have obtained 
a contradiction _L at a world x. 

Modal rules: We give the rules for a generic modal operator with a corresponding generic accessibility relation R, since 
all the modal operators share the structure of these basic introduction/elimination rules; this holds because, for instance, 
we express x:OA as the metalevel implication xUy y.A for an arbitrary y accessible from x. In particular: 

• if * is □ then R is U, 

• if *is ■ then i? is M. 

Other rules: 

• In order to axiomatize □, we add rules (irefl, (isymm, and (i trans, formalizing that U is an equivalence relation. 

• In order to axiomatize ■, we add rules formalizing the following properties: 

- If xMy then there is specific unitary transformation (depending on x and y) that generates y from x: rule U/. 

- The total measurement process is serial: rule Mser says that if from the assumption xMy we can derive a 
for afresh y (i.e. y is different from x and does not occur in a nor in any assumption on which a depends 
other than xMy), then we can discharge the assumption (since there always is some y such that xMy) and 
conclude a. 

- The total measurement process is shift-reflexive: rule Msrefl. 

'See 1151 for a detailed discussion on the rule RAA, which in particular explains how, in order to maintain the duahty of modal operators like □ and 0. 
the rule must allow one to derive x:A from a contradiction ± at a possibly different world y, and thereby discharge the assumption x:^A. 
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- Invariance with respect to classical worlds: rules Msubl and Msub2 say that, if xMx and xMy, then y must 
be equal to x and so we can substitute the one for the other in any formula a. 

Definition 1 (Derivations and proofs). A derivation of a formula a from a set of formulas T in MSQR is a tree formed using 
the rules in MSQR, ending with a and depending only on a finite subset of T; we then write T \- a. A derivation of a in 
MSQR depending on the empty set, h a, is a proof q/ a in MSQR and we then say that a is a theorem of MSQR. 

For instance, the following labelled formula schemata are all provable in MSQR (where, in parentheses, we give the 
intuitive meaning of each formula in terms of quantum register transformations): 

1. x-UA D A 

(the identity transformation is unitary). 

2. x:A D n()A 

(each unitary transformation is invertible). 

3. x-nA D aoA 

(unitary transformations are composable). 

4. x-MA D iA 

(it is always possible to perform a total measurement of a quantum register). 

5. x:U{A<^mA) 

(it is always possible to perform a total measurement with a complete reduction of a quantum register to a classical 
one). 

6. x-MA D MMA 

(total measurements are composable). 

As concrete examples, Figure|2]contains the proofs of the formulas|5]and|6] where, for simplicity, here and in the following 
(cf. Figure |5]l, we employ the rules for equivalence I) and for negation (-1/ and -^E), which are derived from the 
propositional rules as is standard. For instance. 



[x:A]' 



[x:A]^ 



■ abbreviates yj_ 

y-1- , ^ ±E (or RAA) 



x:^A — T^TT 3 I 

x:A D _L 

We can similarly derive rules about r-formulas. For instance, we can derive a rule for the transitivity of M as shown at the 
top of the proof of the formula|6]in Figure|2l 

xMy yMz 

M trans 



abbreviates 



xMz 

yMz zMz xMy 

n Msubl 



3. A semantics for unitary transformations and total measurements 

We give a semantics that formally describes unitary transformations and total measurements of quantum registers, and 
then prove that MSQR is sound and complete with respect to this semantics. Together with the corresponding result for 
generic measurements in Section H] this means that our modal systems indeed provide a representation of quantum registers 
and operations on them, which was the main goal of the paper. 

Definition 2 (Frames, models, structures). A frame is a tuple ^ = (VF, [/, M), where: 
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[y.A]^ yMy ' "''''■^ [yMzf i^^y]^ „ 

il Z. 1 \1 L M„„;,/ r —^14 — iDi — Msrefi 

z:A _ , ^^'^^ [y:M^ yMy ' 

P Msuhl 



y-MA y.A 

— ^ P T T'^ 

y.A -pMA ^ y-MA D A ^ 

y.A ^ UA ^ ^ 



x:U{A ^ UA) 

[yMz] 



[yMzf zMz ^^'^^fl [xMy]'^ 

[xMAY "^'"^^ 

- UE 



^ UP 

y.UA 

x:UUA 



x:UA D UUA 

Figure 2. Examples of proofs in MSQR 



M M M 
W ^ V // V *- w ^— 



V w V *- w — V — ^^ v *- w ^ — // 

M M 

''•7 '■■? 

(ii) (iii) (iv) (iii) and (iv) 

Figure 3. Some properties of thie relation M 



• W is a non-empty set of worlds 
(representing abstractly the quantum registers); 

• U ^ W X W is an equivalence relation 

(vUw means that w is obtained by applying a unitary transformation to v; U is an equivalence relation since identity 
is a unitary transformation, each unitary transformation must be invertible, and unitary transformations are compos- 
able); 

• M CW xW 

( vMw means that w is obtained by means of a total measurement ofv); 
with the fallowing properties: 

(i) Vw, vMw =4> vU w 

(ii) Vu. 3w. vMw 

(iii) Vu, w. vMw =^ wMw 

(iv) Vu, w. vMv & vM w v = w 

(i) means that although it is not true that measurement is a unitary transformation, locally for each v, ifvMw then there 
is a particular unitary transformation, depending on v and w, that generates w from v; the vice versa cannot hold, since 
in quantum theory measurements cannot be used to obtain the unitary evolution of a quantum system, (ii) means that each 
quantum register is totally measurable, (iii) and (iv) together mean that after a total measurement we obtain a classical 
world. Figure\3\shows properties (ii), (iii) and (iv), respectively, as well as the combination of (iii) and (iv)j^ 

^Note that while (iv) says that v is idempotent with respect to M, a unitary transformation U could still be applied to v (and hence the dotted arrow 
decorated with a "?" for U). 
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D J, D E, RAA, ±E, *J*, icE, Urefl, Usymm, Utrans, 



[xPy] [yPy] 

xPy xPy yPz '■ a{x) xPx xPy a{y) xPx xPy 

PU-/^ P tvCLTlS — 7 * P sub 1 

xUy xPz a class a{y/x) a(x/y) 



In "A"/, y is fresh: it is different from x and does not occur in any assumption on which y.A depends other than xRy. 

In class, y is fresh: it is different from x and does not occur in a nor in any assumption on which a depends other than xPy 

and yPy. 

Figure 4. The rules of MSpQR 



A model is a pair ^ = V), where ^ is a frame andV:W ^ 2^'''^P is an interpretation function mapping worlds 
into sets of formulas. 

A structure is a pair — J^), where ^ is a model and J' : Var W is an interpretation function mapping 
variables (labels) into worlds in W, and mapping a relation symbol R G {U, M} into the corresponding frame relation 

{R) (z {U,M}. We extend to formulas and sets of formulas in the obvious way: ^{x:A) = ^{x):A, ^{xRy) — 
y(x)J{R)J{y). and y{{a,, a„}) = {^(ai), . . . , J^(a„)}. 

Given this semantics, we can define what it means for formulas to be true, and then prove the soundness and completeness 
of MSQR. 

Definition 3 (Truth). Truth /or an m-formula in a model ^ — (VF, C/, ill, Y) is the smallest relation N satisfying: 

N r iff r ^ V{w) 

J( , w 1= A D i? iff A => , w\= B 

M.w^UA iff Vw'. wUw' =^^,w'\^A 

J(,w^mA iff Mw'. wMw' =^^,w'\^ A 

Thus, for an m-formula A, we write ^ 1= A iff ^ , w N A for all w. 

Truth for a formula a in a structure ,y = J^) is then the smallest relation 1= satisfying: 

J(,J^xy[y iff J{x)MJ{y) 
Ji^JV^xViy iff ./(x)UJ{y) 
Jl,J^x:A iff Jl,J(x)^A 

We will omit ^ when it is not relevant, and we will denote J" N x:A also by N (x):A or even 1= w.Afor J" [x) = w. By 
extension, ^ , N F iff ^ ^ ^ N a for all a in the set of formulas T. Thus, for a set of formulas T and a formula a, 

r N a iff V^, ^. ^ N J^(r) ^ ^{a) 
iff 'iJi,J.J/:,J^V=^Ji,J^a 

By adapting standard proofs (see, e.g., ll9i rT2l[T3lfT4l[T5l and the proofs in the appendix), we have: 

Tlieorem 1 (Soundness and completeness of MSQR). F h a iffV N a. 



4. Generic measurements 



In quantum computing, not all measurements are required to be total: think, for example, of the case of observing only 
the first qubit of a quantum register To this end, in this section, we formalize MSpQR, a variant of MSQR that provides a 
modal system representing all the possible (thus not necessarily total) measurements. We obtain MSpQR from MSQR by 
means of the following changes: 
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[y.A]^ [yPyY [yPz]^ 
z-A 

[x:H^(AdhA)P [xPyY ^ ^ 
n T\ —. 3 /3 

^ 



Figure 5. An example proof in MSpQR 



Psubl 



• The alphabet of the modal language contains the unary modal operator □ instead of ■, with corresponding O, where 
□^4 intuitively means that A is true in each quantum register obtained by a measurement. 

• The set of relational formulas contains expressions of the form xPy instead of xMy. 

• The rules of MSpQR are given in Figure|4] In particular, is either □ (as before) or for which then R is P, and 
whose properties are formalized by the following additional rules: 

- If xPy then there is a specific unitary transformation (depending on x and y) that generates y from x: rule PU/. 

- The measurement process is transitive: rule P trans. 

- There are (always reachable) classical worlds: class says that j/ is a classical world reachable from world x by a 
measurement. 

- Invariance with respect to classical worlds for measurement: rules Psubl and Psub2. 

Derivations and proofs in MSpQR are defined as for MSQR. For instance, in addition to the formulas for □ already 
hsted for MSQR, the following labelled formula schemata are all provable in MSpQR (as shown, e.g., for formula[3] 
in Figure |5]i: 

1. x:BAd<>A 

(it is always possible to perform a measurement of a quantum register). 

2. x: B A D B B A 
(measurements are composable). 

3. x:<$>{A D bA), i.e. x:^ B -^{A D bA) 

(it is always possible to perform a measurement with a complete reduction of a quantum register to a classical 
one). 

The semantics is also obtained by simple changes with respect to the definitions of Section |3] A frame is a tuple ^ = 
{W, U, P), where P W x W and vPw means that w is obtained by means of a measurement of v, with the following 
properties: 

(i) Vu, w. vPw =^ vU w 
(as for (i) in Section[3]l. 

(ii) Vw, w', w". vPw' k w'Pw" =^ vPw" 
(measurements are composable). 

(iii) Vu. 3w. vPw & wPw 

(each quantum register v can be reduced to a classical one w by means of a measurement). 

(iv) Vu, w. vPv & vPw V = w 

(each measurement of a classical register v has v as outcome). 

Models and structures are defined as before, with J^(P) = P, while the truth relation now comprises the clauses 

^,w\=bA iff \/w'. wPw' => j^,w' ^ A 
J^.J^xPy iff J{x)PJ{y) 
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Finally, MSpQR is also sound and complete. 

Theorem 2 (Soundness and completeness of MSpQR). T\~aiffr\^a. 

5. Conclusions and future work 

We have shown that our modal natural deduction systems MSQR and MSpQR provide suitable representations of quan- 
tum register transformations. As future work, we plan to investigate the proof theory of our systems (e.g. normalization, 
subformula property, (un)decidability), in view of a possible mechanization of reasoning in MSQR and MSpQR (e.g. en- 
coding them into a logical framework IfTTII ). We are also working at extending our approach to represent and reason about 
further quantum notions, such as entanglement. 
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A Proof of soundness and completeness 



Theorem[T]follows from Theorems[3]and|4]below. 
Theorem 3 (Soundness of MSQR). T \- a implies F N a. 

Proof. We let be an arbitrary model and prove that if F h a then 1= ^(F) implies 1= J^{a) for any ^. The proof proceeds 
by induction on the structure of the derivation of a from F. The base case, where a G F, is trivial. There is one step case for 
each rule of MSQR. 

Consider an application of the rule RAA, 

[x:^A] 

where F' h j/:_L with F' = F U {x:^A}. By the induction hypothesis, F' h y:_L impUes J^(F') N .y{y):± for any .y. We 
assume N J^{T) and prove N J^{x):A. Since w.l. for any world w, from the induction hypothesis we obtain]^ ^(F'), and 
thusi^ .y{x):^A, i.e. N .y{x):A andi^ y{x):±. 
Consider an application of the rule ±E, 

with F h x:J-. By the induction hypothesis, F h x:l. implies ^(F) N y{x):l. for any J^. We assume N J^(F) and prove 
N J^(a) for an arbitrary formula a. If N =-^(F) then N ^(a:):_L by the induction hypothesis. But since w.l. for any world 
ui, thenl^ ^(^) thus 1= J^(a) for any a. 
Consider an application of the rule 

[xRy] 



y-A 

x:ifA 



where F' h y.A with y fresh and with F' — F U {xRy}. By the induction hypothesis, for all interpretations y, if N ^(F) 
then N We let be any interpretation such that N J^(F), and show that N J^(a;):-^A. Let w be any world such that 

y{x),f{R)w where ^(i?) G M} depending on Since ^ can be trivially extended to another interpretation (still 
called y for simplicity) by setting J^(y) = w, the induction hypothesis yields N y{y):A, i.e. N wiA, and thus N ^(a;):-^'^. 
Consider an application of the rule i^E 

x:ifA xRy 



y.A 



irE 



with Fi h x:ifA and F2 h and F D Fi U F2. We assume ^ ^(F) and prove N ^(j/):74. By the induction hypothesis, 
for all interpretations J?, if N J^(Fi) then ^ J^(a;):*A and if 1= J^(F2) then N J^(a;) J^(i?)^(2/), where y{R) £ {[/, A/} 
depending on *. If N J?^(F), then N J^(j;):*v4 and N y{x)y{R)y{y), and thus N J^(y):A 

The rules (Jrefl, {isymm, and {) trans are sound by the properties of U. 

The rule U/ is sound by property (i) in Definition|2] 

Consider an application of the rule Mser 

[xMy] 
^ Mser 

with F' = F U {xMy}, for y fresh. By the induction hypothesis, F' h a implies y{T') t= ^{a) for any J^. Let us suppose 
that there is an y such that N ^'(F') and ^'(a). Let us consider an such that y'{z) — J'{z) for all z such that 
z ^ y and is the world w such that {y)Mw, which exists by property (ii) in Definition|2] Since y does not occur 

in F nor in a, we then have that N J^"(F') and y'{a), contradicting the universahty of the consequence of the induction 
hypothesis. Hence, Mser is sound. 

The rule Msre/Z is sound by property (iii) in Definition|2] 
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Consider an application of the rule Msubl 



a{x) xMx xMy 

ri—x Msubl 

a[y/x) 

with Ti h a{x), T2 h xUx, V- xMy, and T D Ti U r2 U Ta. We assume N J{T) and prove N .y{a{y/x)). By the 
induction hypothesis, Ti h a{x) implies J^{Ti) N J^{a{x)), T2 l- xUx implies ^{T2) N ^{x)MJ{x), and Ta h xMj/ 
implies J^(r3) N ^(a;)Mj^(j/). By property f/vj in Definition|2l we then have ^{x) — y{y) and thus t= y{a{y/x)):A. 
The case for rule M sub2 follows analogously. □ 

To prove completeness (Theorem|4]i, we give some preliminary definitions and results. For simplicity, we will split each 
set of formulas T into a pair {LF, RF) of the subsets of 1-formulas and r-formulas of F, and then prove {LF, RF) N a 
implies {LF, RF) h a. We call {LF, RF) a context and, slightly abusing notation, we write a G {LF , RF) whenever 
a G LF or a G RF, and write x G {LF , RF) whenever the label x occurs in some a G {LF, RF). We say that a context 
{LF , RF) is consistent iff {LF , RF) F x:_L for every x, so that we have: 

Fact 1. If{LF, RF) is consistent, thenfor every x and every A, either {LF\j{x:A}, RF) is consistent or {LF[j{x:-iA}, RF) 
is consistent. 



Let {LF, RF) be the deductive closure of {LF , RF) for r-formulas under the rules of MSQR, i.e. 



{LF, RF) = {xRy \ {LF , RF) h xRy] 
for R G {U, M}. We say that a context {LF , RF) is maximally consistent iff 
1 . it is consistent, 



2. it is deductively closed for r-formulas, i.e. {LF , RF) — {LF , RF), and 

3. for every x and every A, either x:A G {LF , RF) or x:^A G {LF , RF). 

Let us write {LF , RF) N'^ a when 5^"^ N {LF , RF) implies S^'^ N a. Completeness follows by a Henkin-style proof, 
where a canonical structure 

= (.^^ .j^") = {w, c/^ M", v, J") 

is built to show that {LF , RF) V a impUes {LF, RF) )^^' a, i.e. .y ^ {LF , RF) and .y F a. 

In standard proofs for unlabelled modal logics (e.g. |61) and for other non-classical logics, the set is obtained by 
progressively building maximally consistent sets of formulas, where consistency is locally checked within each set. In our 
case, given the presence of 1-formulas and r-formulas, we modify the Lindenbaum lemma to extend {LF , RF) to one single 
maximally consistent context {LF* , RF*), where consistency is "globally" checked also against the additional assumptions 
m rfE The elements of are then built by partitioning LF* and RF* with respect to the labels, and the relations R 
between the worlds are defined by exploiting the information in RF*. 

In the Lindenbaum lemma for predicate logic, a maximally consistent and cj-complete set of formulas is inductively built 
by adding for every formula -'Vx.A a witness to its truth, namely a formula -^A[c/x] for some new individual constant c. 
This ensures that the resulting set is cj-complete, i.e. that if, for every closed term t, A[t/x] is contained in the set, then so 
is Vx.A. A similar procedure applies here in the case of 1-formulas of the form x-.^-kA. That is, together with x:^ifA we 
consistently add y.^A and xRy for some new y, which acts as a witness world to the truth of x:^-kA. This ensures that 
the maximally consistent context {LF* , RF*) is such that if xRz G {LF* , RF*) implies z:B G {LF* , RF*) for every z, 
then x:^B G {LF* , RF*), as shown in Lemma |2]below. Note that in the standard completeness proof for unlabelled modal 
logics, one instead considers a canonical model and shows that if w G and w N ^^A, then also contains 
a world w' accessible from w that serves as a witness world to the truth of ^^A at w, i.e. w' N -^A. 

Lemma 1. Every consistent context {LF, RF) can be extended to a maximally consistent context {LF* , RF*). 



^We consider only consistent contexts. If {LF, RF) is inconsistent, then LF, RF h x:A for all x:A, and thus completeness immediately holds for 
1-formulas. Our language does not allow us to define inconsistency for a set of r-formulas, but, whenever (LF, RF) is inconsistent, the canonical model 
built in the following is nonetheless a counter-model to non-derivable r-formulas. 
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Proof. We first extend the language of MSQR with infinitely many new constants for witness worlds. Systematically let h 
range over labels, c range over the new constants for witness worlds, and a range over both. All these may be subscripted. 
Let Zi, ^2, ■ • • be an enumeration of all 1-formulas in the extended language; when li is a:A, we write -^li for a:^A. Starting 
from {LFq, RFq) — {LF, RF), we inductively build a sequence of consistent contexts by defining {LFi^i, RFi^i) to be: 

• {LFi, RFi), if {LFi U {^i+i}, RFi) is inconsistent; else 

• {LFi U {^i+i}, RFi), if li^i is not a:^irA; else 

• {LFi U {a:^irA, c:^A}, RFi U {aRc}) for a c ^ {LF, U {a:-.*A}, RFi), if k+i is a:^*A. 

Every {LFi, RFi) is consistent. To show this we show that if {LFi U {a:^ifA}, RFi) is consistent, then so is {LFi U 
{ai^ifA, c:^A}, RFi U {aRc}) for a c ^ {LFi U {a:^irA}, RFi); the other cases follow by construction. We proceed by 
contraposition. Suppose that 

{LF, U {a:-*A, c:^A}, RF, U {aRc}) h aj:± 
where c ^ (Li^^ U {a:-*A}, iZf j). Then, by RAA, 

{LF, U {a:^*A}, U {ai?c}) h c:A , 

and V^/ yields 

{LF, U {a:-*A}, ,) h a:*A . 

Since also 

(LF, U {a-.^-kA}, RF,) h a:^*A , 

by -^E we have 

{LF,U{a:^icA},RF,)ha:±, 

i.e. (Li^i U {a:^-^^}, RFi) is inconsistent. Contradiction. 

Now define 

{LF*,RF*) = (|jLF„|Ji?F,) 

i>0 i>0 

We show that {LF* , RF*) is maximally consistent, by showing that it satisfies the three conditions in the definition of 
maximal consistency. For the first condition, note that if 

{[J LF,,\J RF,) 

i>0 i>0 

is consistent, then so is 

{\jLF„[jRF,). 

i>0 i>0 

Now suppose that {LF* , RF*) is inconsistent. Then for some finite {LF' , RF') included in {LF* , RF*) there exists an a 
suchthat {LF',RF') ha:!. Every 1-formula / e {LF' , RF') is in some {LFj, RFj). Foi each I e {LF' , RF'),leliihethe 
least j such that I £ {LF^^RFj), and let i ^ maxji; | / e {LF' , RF')}. Then {LF' , RF') C {LF„RF,), and {LFi, RFi) 
is inconsistent, which is not the case. 

The second condition is satisfied by definition of {LF* , RF*). 

For the third condition, suppose that li+i ^ {LF* , RF*). Then k+i ^ {LFi+i, RFi+i) and {LFi U {h+i}, RFi) is 
inconsistent. Thus, by Fact[T] {LFi U {^k+i}, RFi) is consistent, and -i/i+i is consistently added to some {LFj,RFj) 
during the construction, and therefore -i/i+i G {LF* , RF*). □ 

The following lemma states some properties of maximally consistent contexts. 

Lemma 2. Let {LF* , RF*) be a maximally consistent context. Then 

1. {LF*,RF*) h a,Raj iffa,Raj G {LF* , RF*). 

2. {LF*,RF*)^ u:A iffa:Ae {LF*,RF*). 
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3. a:BZ)C e {LF* , RF*) iffa:B G {LF*,RF*) implies a:C £ {LF*,RF*). 



4. ai-.-kB e {LF\RF*) iff a^Ra, e {LF*,RF*) implies aj-.B e {LF* , RF*) for all aj. 

Proof. 1 and 2 follow immediately by definition. We only treat 4 as 5 follows analogously. For the left-to-right direction, 
suppose that a,:*B e [LF* , RF*). Then, by (ii), {LF*,RF*) h ai:*B, and, by we have {LF*,RF*) h aiRaj 
implies {LF* , RF*) h ay.B for all a^. By 7 and 2, conclude a.Raj e {LF* , RF*) implies af.B G {LF*,RF*) for all 
aj. For the converse, suppose that ai'.ifB {LF* , RF*). Then Ui'.^irB G {LF* , RF*), and, by the construction of 
{LF*,RF*), there exists an such that a,i?aj G (Li^*, iZf *) and af.B ^ {LF*,RF*). □ 

We can now define the canonical structure 

= {.£\ J") = {W, C/^ J") 
Definition 4. Given a maximal consistent context {LF* ^ RF*), we define the canonical structure =5^"^ as follows: 

• W'' = {a\ae {LF*,RF*)}, 

• {a„aj) G L/= iffa.Uaj G {LF*,RF*), 

• {a„aj) G Af= #a,;Maj G {LF*,RF*), 

• y=(r) = a iffa:r G (Lf *, 

• j^=(a) = a. 

Note that the standard definition of i?^ adopted for unlabelled modal logics, i.e. 

{ai,aj) G R" iff {A | DA G C , 

is not applicable in our setting, since {A \ DA G Ui} C aj does nof imply h aiRaj. We would therefore be unable to prove 
completeness for r-formulas, since there would be cases, e.g. when RF = {}, where aiRaj but (a^, Aj) G i?"^ and thus 
y N a,;i?aj. Hence, we instead define (a^, a^) G 7?"= iff aii?aj G {LF*,RF*); note that therefore aiRaj G {LF*,RF*) 
implies {A | OA G ai} C Oj. As a further comparison with the standard definition, note that in the canonical model the 
label a can be identified with the set of formulas {A \ a: A G {LF*, RF*)}. Moreover, we immediately have: 

Fact2. aiRaj G {LF* , RF*) iff{LF*,RF*) N-*"' aiRaj. 

The deductive closure of {LF* , RF*) for r-formulas ensures not only completeness for r-formula, as shown in Theorem|4] 
below, but also that the conditions on i?^ are satisfied, so that S^'^ is really a structure for MSQR. More concretely: 

• is an equivalence relation by construction and rules (irefl, (isymm, and U trans. For instance, for transitivity, 
consider an arbitrary context {LF, RF) from which we build ,S^'^. Assume (a^, aj) G W and {aj, a^) G V^. Then 
fliUflj G {LF* ,RF*)wdajy}ak G {LF*,RF*). Since {LF*,RF*)is deductively closed, by 7 in Lemma|2]and rule 
\Jtrans, we have fljUafe G {LF*, RF*). Thus, (a^, u^) G and W is indeed transitive. 

• Vw, w G ly^. vMw => wf7w holds by construction and rule U/. 

• Vw G W. Bw G ly^. wMw holds by construction and rule Mser. For the sake of contradiction, consider an arbitrary 
ai and a variable a'j that do not satisfy the property. Define {LF' , RF') — {LF* , RF*) U {aiMa'j}. Then it cannot 
be the case that {LF' , RF') h a, for otherwise {LF* , RF*) h a would be derivable by an application of the rule 
Mser. Thus, {LF' , RF') V a. But then {LF' , RF') must be in the chain of contexts built in Lemma|2l So, by the 
maximality of {LF* , RF*), we have that {LF' , RF') = {LF* , RF*), contradicting our assumption. Hence, for some 
aj, the r-formula aiMaj is in {LF* , RF*), which is what we had to show. 

• Vw, w G W^. vMw wMw holds by construction and rule Msrefl. 
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• Vu, w G W^. vMv & vMw V ~ w holds by construction and rules Msubl and Msub2 since w is a classical 
world. Consider an arbitrary context {LF, RF) from which we build S"' and assume (a^, a^) G and (a^, Oj) G 
Then fljMa, G {LF* , RF*) and a.Maj G {LF*,RF*). Thus, for each a^: A G (Li^*, we also have 

aj-.A G {LF*,RF*); otherwise, since {LF*,RF*) is deductively closed, we would have aj-.^A G {LF* , RF*) and 
alsofljiyl G {LF*, ) by 7 in Lemma|2]and rule MsuW, and thus a contradiction. Similarly, if :^ G {LF*,RF*) 
then Ui-.A G {LF* , RF*) by rule Msm&^. Hence, for each m-formula A, we have that a^.A G {LF*,RF*) iff 
ajtA G {LF* , RF*), which means that and aj are equal with respect to m-formulas. 

Under the same assumptions, we can similarly show that ai and aj are equal with respect to r-formulas, i.e. that when- 
ever {LF* , RF*) contains an r-formula that includes a; then it also contains the same r-formula with aj substituted 
for Qi, and vice versa. To this end, we must consider 8 different cases corresponding to 8 different r-formulas. 

- If afcUfli G {LF* , RF*) for some a^, then from the assumption that UiMaj G {LF* , RF*) we have ailiaj G 
{LF* , RF*), by 1 in Lemma|2]and rule U/. Therefore, afcUoj G {LF* , RF*) by rule {) trans. 

- We can reason similarly for ajUak G {LF*, RF*) and also apply rules U/ and U trans to conclude that then also 

a^Uofe G {LF*,RF*). 

- If QiUak G {LF* , RF*) for some a^, then from the assumption that UiMaj G {LF* , RF*) we have aiUaj G 
{LF*,RF*), by 1 in Lemma|2]and rule U/, and thus ajUat G {LF*,RF*), by rule \Jsymm. Therefore, 
OjUafc G (if*, *) by rule (Jtrans. 

- We can reason similarly for ak^aj G {LF*, RF*) and also apply rules U/, (Jsymm, and (Jtrans to conclude 
that then also afcUa^ G (i^i^*, 

- If afcMfli G {LF* , RF*) for some afc, then from the assumption that UiMaj G {LF* , RF*) we have OfcMaj G 
{LF* , RF*), by 7 in Lemma|2]and the derived rule Mtrans. 

- We can reason similarly for ajMafc G (LF*, 7?F*) and also apply rule Mtmns to conclude that then also OiUafc G 
{LF*,RF*). 

- If OiMofc G {LF* , RF*) for some at, then from the assumptions that a^Mai G {LF* , RF*) and aiMcj G 
{LF*,RF*)v/e have a^Mafc G (LF*, 7?F*), by 7 in Lemma|l]and rule M.su67 . 

- We can reason similarly for a^Maj G {LF*, RF*) and apply rule Msub2 to conclude that then also akMui G 
(LF*,iZF*). 

Hence, and are equal also with respect to r-formulas, and thus a,; ~ aj whenever {ai,ai) G M'^ and (a^, Oj) G 
M'^, which is what we had to show. 

By Lemma|2]and Fact|2] it follows that: 

Lemma 3. a: A G {LF*,RF*) iff{LF*,RF*) a: A. 

Proof. We proceed by induction on the grade of a:A, and we treat only the step case where a:A is ai.-kB; the other cases 
follow analogously. For the left-to-right direction, assume ait-^i? G {LF* , RF*). Then, by Lemma|2] ai_Raj G {LF* , RF*) 
implies aj-.B G {LF*,RF*), for all a^. Fact |2] and the induction hypothesis yield that {LF* , RF*) N-^" aj-.B for all 
flj such that {LF*,RF*) N-^' a,y%R)aj, i.e. {LF*,RF*) N'^" a,:*B by Definition |3] For the converse, assume 
a.-.^icB G {LF*,RF*). Then, by Lemma|2l a,7?aj G {LF* , RF*) and a^.^B G (LF*, 7?F*), for some a^. Fact|2]and 
the induction hypothesis yield {LF*,RF*) ^^'^ a^Ra^ and {LF*,RF*) "f-^" af^B, i.e. {LF* ,RF*) a,;:-*Bby 
Definition [3] □ 

We can now finally show: 

Theorem 4 (Completeness of MSQR). V \= a implies F h a. 

Proof. If (LF, i?F) F hiRhj, then ^ (LF*, RF*), and thus (LF*, i?F*) J^-*^' 6,7?6j by Fact|2l 

If (LF, i?F) 6:^, then (LF U {foi-iA}, 7?F) is consistent; otherwise there exists a h such that (LF U {b:^A}, RF) h 
6i:_L, and then (LF, 7?F) h 6:^. Therefore, by Lemma[T] (LF U {b:^A}, RF) is included in a maximally consistent context 
((LF U {b:^A})*,RF*). Then, by Lemmag] ((LF U 7?F*) N*^"" i.e. ((LF U iZF*) >^-^' 6:A 

and thus (LF, RF) F'^' u;:A. □ 
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We can reason similarly to show the soundness and completeness of MSpQR with respect to the corresponding semantics: 
Theorem|2]follows from Theorems|5]and|6]below. 

Theorem 5 (Soundness of MSpQR). F h a implies F N a. 

Proof. We let ^ be an arbitrary model and prove that if F h a then 1= ^(F) implies 1= J^(a) for any ^. The proof proceeds 
by induction on the structure of the derivation of a from F. The base case, where a € F, is trivial. There is one step case for 
each rule of MSpQR, where the soundness of the rules D I, D E, RAA, LE, iirefl, (Jsymm, Utrans follows exactly like 
in the proof of Theorem|3] 

The soundness of the rules ici and icE follows exactly like in the proof of Theorem[3] with the only difference that when 
* is □ then R is P. 

The rule PL)/ is sound by property (i) in the definition of the semantics for MSpQR. 
The rule P trans is sound by property (ii) in the definition of the semantics for MSpQR. 

The soundness of the rule class follows like for the soundness of the rule Mser in the proof of Theorem [3] this time 
exploiting property (Hi) in the definition of the semantics for MSpQR. 

The soundness of the rules Psubl and Psub2 follows like for the soundness of the rules Msubl and Msub2 in the proof 
of Theorem|3] this time exploiting property ( iv) in the definition of the semantics for MSpQR. □ 

To prove completeness (Theorem|4l), we proceed like for the case of MSQR, mutatis mutandis in the construction of the 
canonical model. In particular, given a maximal consistent context {LF* , RF*), we define the canonical structure S"' = 

{W, U", P", J") by setting 

• (a,,aj) e P^ma.Paj £ {LF*,RF*). 

To show that the conditions on i?^ are satisfied, so that S"' is really a structure for MSpQR, we reuse the results proved for 
MSQR and in addition show the following: 

• Vv, w G W^. vPw =4> vUw holds by construction and rule PU/. 

• Vv, w\ w" e W^. vPw' & w'Pw" => vPw" holds by construction and rule Ptrans. 

• Vu G W. 3w £ W. vPw & wPw holds by construction and rule class. For the sake of contradiction, consider an 
arbitrary ai and a variable a'j that do not satisfy the property. Define {LF' , RF') — {LF* , RF*) U {aiPa'j, a'jPa'j}. 
Then it cannot be the case that {LF' , RF') h a, for otherwise {LF*, RF*) h a would be derivable by an application 
of the rule class. Thus, {LF' , RF') V- a. But then {LF' , RF') must be in the chain of contexts built in Lemma|2] So, 
by the maximality of {LF* , RF*), we have that {LF' , RF') = {LF* , RF*), conti'adicting our assumption. Hence, 
for some aj, the r-formulas a^Maj and ajMaj are both in {LF* , RF*), which is what we had to show. 

• Vv, w G W. vPv & vPw V — w holds by construction and rules Psubl and Psub2 since u is a classical 
world. Consider an arbitrary context {LF , RF) from which we build and assume (a^, ai) G P"^ and (a^, aj) G P^. 
Thena^Pa^ G {LF* , RF*) a^Paj G {LF*,RF*). Thus, for each a,; G {LF* , RF*), we also ha\e af.A G 
{LF* , RF*); otherwise, since {LF* , RF*) is deductively closed, we would have aj-.^A G {LF* , RF*) and also 
Gj-.A G {LF* , RF*) by 7 in Lemma |2] and rule Psubl, and thus a contradiction. Similarly, if aj-.A G {LF* , RF*) 
then Gi-.A G {LF* , RF*) by rule Psub2. Hence, for each m-formula A, we have that a^A G {LF*,RF*) iff 
aj-.A G {LF* , RF*), which means that ai and aj are equal with respect to m-formulas. 

Under the same assumptions, we can similarly show that Ui and aj are equal with respect to r-formulas, i.e. that when- 
ever {LF* , RF*) contains an r-formula that includes a; then it also contains the same r-formula with aj substituted 
for tti, and vice versa. To this end, we must consider 8 different cases corresponding to 8 different r-formulas. 

- If afeUai G {LF* , RF*) for some Ofe, then from the assumption that aiPaj G {LF* , RF*) we have aiUaj G 
{LF*, RF*), by 1 in Lemma|2]and rule PU/. Therefore, afeUa^ G {LF* , RF*) by rule Utrans. 

- We can reason similarly for ajUat G {LF* , RF*) and also apply rules PU/ and Utrans to conclude that then 
also ttiUak G {LF*,RF*). 

- If a^Uofc G {LF* , RF*) for some a^, then from the assumption that aiPaj G {LF* , RF*) we have aiiiaj G 
{LF*,RF*), by / in Lemma|2]and rule PU/, and thus a^Uaj G {LF*,RF*), by rule Usymm. Therefore, 
ajUflfc G {LF*, RF*) by rule Utrans. 
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- We can reason similarly for UkUaj G {LF*, RF*) and also apply rules PL)/, (isymm, and Utrans to conclude 
that then also afcUoi e {LF*,RF*). 

- If afcPoi € {LF* , RF*) for some Ofc, then from the assumption that a,;Paj G {LF* , RF*) we have OfePaj £ 
(Li^*, iZf *), by 7 in Lemma|2]and the rule P trans. 

- We can reason similarly for flj Pflfc G (LF*, and also apply rule Pfrarts to conclude that then also a,;Uafc G 
{LF*,RF*). 

- If OiPofc G {LF* , RF*) for some a/j, then from the assumptions that a^Pai G {LF* , RF*) and a^Paj G 
{LF*,RF*)we have a^Pafe G (LF*, i?F*), by 7 in Lemma|2]and rule Psw^i. 

- We can reason similarly for a^Pcj G {LF* , RF*) and apply rule Psub2 to conclude that then also a^Poi G 
{LF*,RF*). 

Hence, Ui and aj are equal also with respect to r-formulas, and thus = aj whenever {ai,ai) G and (a^, a^) G P"^, 
which is what we had to show. 

Proceeding like for MSQR, we then have: 

Theorem 6 (Completeness of MSpQR). T \= a implies T \- a. A 
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